CVE-2020-36947 LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection

What is CVE-2020-36947?

CVE-2020-36947 is a high-severity SQL injection vulnerability in Librenms Librenms, published on 27 Jan 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information. Attackers can exploit the vulnerability by manipulating the 'sort' parameter with crafted SQL injection techniques to retrieve sensitive database contents through time-based blind SQL injection.

Weakness: CWE-89

Which versions are affected by CVE-2020-36947?

2 open source packages ship an affected version, including librenms/librenms. It affects 1 product.

Products include Librenms Librenms.

How do I fix CVE-2020-36947?

No fix has been published for CVE-2020-36947 yet. Limit exposure of the affected software until one is available.

Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.

Is CVE-2020-36947 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-36947 exists.

Other vulnerabilities in Librenms Librenms

• CVE-2023-4982 Cross-site Scripting (XSS) - Stored in librenms/librenms Critical 9.8
• CVE-2022-29712 Command injection in librenms Critical 9.8
• CVE-2021-44278 Path traversal in librenms/librenms Critical 9.8
• CVE-2019-10665 LibreNMS Information Disclosure Critical 9.8
• CVE-2018-20434 LibreNMS arbitrary OS commands execution Critical 9.8

All Librenms Librenms vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-qp2j-v5jg-hg68.